CVE-2014-1364: Buffer Overflow
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1364?
CVE-2014-1364 is a critical vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2014-1364?
To fix CVE-2014-1364, update your Apple iOS, Safari, or tvOS to the latest version as recommended by Apple.
Which versions are affected by CVE-2014-1364?
CVE-2014-1364 affects Apple Safari versions prior to 6.1.5, iOS versions before 7.1.2, and tvOS versions before 6.1.2.
Can CVE-2014-1364 be exploited remotely?
Yes, CVE-2014-1364 can be exploited remotely through a crafted website.
What are the potential impacts of CVE-2014-1364?
The potential impacts of CVE-2014-1364 include arbitrary code execution and application crashes due to memory corruption.